download-legor-live.pages[.]dev

Several scan signals suggest elevated risk at the time of this scan. The domain was flagged by 8 out of 91 security engines, with detections broadly classifying it as phishing. In addition, the page strongly references Ledger Live and uses branding associated with a well-known cryptocurrency product, yet the site is hosted on a pages.dev subdomain rather than the brand's main official domain. That kind of domain mismatch may indicate a look-alike page intended to imitate an established service.

At the same time, the malware scan did not identify malicious files in the limited set of scanned resources, and blacklist checks were clean at the time of review. The visible outbound links point to legitimate app-store and Ledger-related destinations, which can sometimes be used to make a page appear trustworthy. Even so, phishing pages do not always contain malware, and a clean file scan does not rule out credential theft, social engineering, or brand impersonation.

Given the combination of multiple phishing detections, low trust scoring, lack of ranking, and branding that appears to imitate a known cryptocurrency service from a non-official host, this website may pose potential risks to visitors based on available scan data.